Microsoft® .NET Distributed Applications: Integrating XML Web Services and .NET Remoting

Windows Authentication

The first thing you need to know about Windows authentication is that it’s practical only if you’re using IIS to host your remote components. If you’re adding authentication to an XML Web service, this level of support is automatic. If you’re using .NET Remoting, you must use IIS as the component host (as described in Chapter 11). If you need the freedom to switch your remote component technology in the future, to use a custom component host, or to use a binary-encoded channel, you need the flexibility of custom authentication instead of Windows authentication.

You should also realize that even when you use Windows authentication, your code won’t run under the identity of the authenticated user. Instead, your code runs under ...